Static task
static1
Behavioral task
behavioral1
Sample
c64f68f5faa414cb028c879a25cb55e4ae4914ad783e485f009c050d86964256.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c64f68f5faa414cb028c879a25cb55e4ae4914ad783e485f009c050d86964256.exe
Resource
win10v2004-20220812-en
General
-
Target
c64f68f5faa414cb028c879a25cb55e4ae4914ad783e485f009c050d86964256
-
Size
67KB
-
MD5
ce2bac9edd9ad431a45e1ca292682ba3
-
SHA1
5343126de5c2f5c66df08d53dfec71d3b2e2d7cf
-
SHA256
c64f68f5faa414cb028c879a25cb55e4ae4914ad783e485f009c050d86964256
-
SHA512
787f178b7e78fb7f013e312e32ff8429671dd70228198e5d1410285f11a4587870558692e177c01bb31ae0350966a335dad8e2f2401f449c51f5bf398ac3c336
-
SSDEEP
768:UPjAfGUdroJequH+jsLfJPkzTSy3sYQLOyZQ+eU+CTxys6Ipw+uuAS0Vys:UrArT+jeR4BsZDd6KuuADV
Malware Config
Signatures
Files
-
c64f68f5faa414cb028c879a25cb55e4ae4914ad783e485f009c050d86964256.exe windows x86
1fc74d0d285d5691a93becc0ba2450a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetCommandLineA
GetModuleHandleA
CreateFileA
user32
MessageBoxA
GetMessageA
ChangeMenuW
DialogBoxParamA
CreateDesktopW
DdeDisconnectList
DefDlgProcA
DestroyMenu
LoadCursorA
LoadIconA
CopyAcceleratorTableA
gdi32
GetTextMetricsW
StartPage
RemoveFontResourceExA
MoveToEx
GetROP2
EnumFontFamiliesExW
GetBitmapBits
GetTextExtentPointA
PaintRgn
SetDIBits
SetPixelV
PolyBezierTo
ScaleViewportExtEx
CreateEllipticRgnIndirect
StrokeAndFillPath
TextOutA
FrameRgn
GetDCPenColor
SetMapperFlags
shlwapi
StrChrA
StrRChrIA
StrChrIA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DER Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 666B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ